System and method for establishing an in-vehicle cryptographic manager

1. An in-vehicle encryption system comprising a plurality of vehicle subsystems, an in-vehicle encryption system comprising:

a security ECU module configured to communicate with a remote cryptographic module, the security ECU module comprising a processor and a per vehicle master secret (PVMS) value stored in the security ECU module, wherein the security ECU module uses the PVMS value to authenticate with the remote cryptographic module and to establish an external encrypted communication link with the remote cryptographic module;

a first subsystem ECU module configured to generate a first globally unique identifier (GUID) and to transmit the first GUID value to the security ECU module; and

a second subsystem ECU module configured to generate a second globally unique identifier (GUID) and to transmit the second GUID value to the security ECU module,

wherein the security ECU module uses the first GUID value to establish a first encrypted communication link with the first subsystem ECU module,

wherein the first subsystem ECU module is further configured to generate a first random number and to transmit the first random number to the security ECU module,

wherein the security ECU module uses the second GUID value to establish a second encrypted communication link with the second subsystem ECU module,

wherein the second subsystem ECU module is further configured to generate a second random number and to transmit the second random number to the security ECU module, and

wherein the security ECU module is further configured to transmit the first GUID value, the first random number, the second GUID value, and the second random number to the remote cryptographic module via the external encrypted communication link.

2. The in-vehicle encryption system of claim 1 , wherein the security ECU module further uses both the first random number and the first GUID value to establish the first encrypted communication link with the first subsystem ECU module.

3. The in-vehicle encryption system of claim 2 , wherein the security ECU module generates a first key that is used to establish the first encrypted communication link, wherein the first key is based on the first random number, the first GUID value, and the PVMS value.

4. The in-vehicle encryption system of claim 3 , wherein the security ECU module further uses both the second random number and the second GUID value to establish the second encrypted communication link with the second subsystem ECU module.

5. The in-vehicle encryption system of claim 4 , wherein the security ECU module generates a second key that is used to establish the second encrypted communication link, wherein the second key is based on the second random number, the second GUID value, and the PVMS value.

6. The in-vehicle encryption system of claim 5 , wherein the first subsystem ECU module is further configured to generate a third key that is used to establish a third encrypted communication link with the second subsystem ECU module, wherein the third key is based on the first random number and the second GUID value.

7. The in-vehicle encryption system of claim 6 , wherein the second subsystem ECU module is further configured to generate a fourth key that is used to establish the third encrypted communication link with the first subsystem ECU module, wherein the fourth key is based on the second random number and the first GUID value.

8. A method of in-vehicle encryption for use in a vehicle system comprising a plurality of vehicle subsystems, the method comprising:

in a security ECU module comprising a processor and a per vehicle master secret (PVMS) value stored in the security ECU module;

authenticating with a remote cryptographic module using the PVMS value; and

establishing an external encrypted communication link with the remote cryptographic module using the PVMS value;

in a first subsystem ECU module, generating a first globally unique identifier (GUID) and transmitting the first GUID value to the security ECU module;

in a second subsystem ECU module, generating a second globally unique identifier (GUID) and transmitting the second GUID value to the security ECU module;

in the security ECU module, using the first GUID value to establish a first encrypted communication link with the first subsystem ECU module;

in the first subsystem ECU module, generating a first random number and to transmit the first random number to the security ECU module;

in the security ECU module, using the second GUID value to establish a second encrypted communication link with the second subsystem ECU module;

in the second subsystem ECU module, generating a second random number and to transmit the second random number to the security ECU module; and

in the security ECU module, transmitting the first GUID value, the first random number, the second GUID value, and the second random number to the remote cryptographic module via the external encrypted communication link.

9. The method of claim 8 , further comprising:

in the security ECU module, using both the first random number and the first GUID value to establish the first encrypted communication link with the first subsystem ECU module.

10. The method of claim 9 , further comprising:

in the security ECU module, generating a first key that is used to establish the first encrypted communication link, wherein the first key is based on the first random number, the first GUID value, and the PVMS value.

11. The method of claim 10 , further comprising:

in the security ECU module, using both the second random number and the second GUID value to establish the second encrypted communication link with the second subsystem ECU module.

12. The method of claim 11 , further comprising:

in the security ECU module, generating a second key that is used to establish the second encrypted communication link, wherein the second key is based on the second random number, the second GUID value, and the PVMS value.